Privacy Policy
Rubyy is a pre-launch event ticketing platform. This page covers what data we collect from visitors to rubyy.com while we are in coming-soon mode, and what we do with it. It also describes how Rubyy handles phone numbers and SMS data for account holders who opt in to the Rubyy SMS messaging program (see Terms § 4 for the full SMS program terms). The short version: we collect the minimum we need to email or text you when you have asked us to, and we do not sell your data.
What we collect
When you submit either form on this site (the launch-list signup or the contact form), we record:
- Your email address, so we can email you when we open the doors and reply to contact-form messages.
- Your name and message, only on the contact form so we know who we are replying to.
- Your IP address and browser user-agent, used for abuse prevention (rate-limiting and bot-detection).
- Your selected language, so we can email you in the language you signed up in.
- Your phone number, only if you opt in to the Rubyy SMS messaging program by verifying a mobile number in your account settings or by checking the SMS opt-in box at checkout. We also store the opt-in event (which channel, when, IP), your opt-out state (so we can honour STOP requests permanently), and per-message delivery receipts returned by our SMS provider.
No advertising IDs and no cross-site tracking pixels. Two third-party services see traffic to the site and are detailed in Where your data lives below: Cloudflare (always, as our CDN and edge security layer; also runs cookieless visitor analytics) and Google Analytics 4 (only when you opt in via the cookie banner). When you opt in to SMS, your phone number is also processed by our SMS providers (Twilio, and in some regions Telnyx); see Where your data lives below for details.
Cookies
Our cookies are split into two categories. Necessary cookies are always on; without them the site cannot function. Optional cookies only run if you grant consent via the cookie banner (or the "Cookie preferences" link in the footer).
Strictly necessary
rs: session cookie used for CSRF protection and rate-limiting. Cleared when you close the browser.rs_lang: remembers your language choice for one year. Only set when you explicitly pick a non-default language.rs_consent: records your cookie banner choices in a single line, e.g.v1(necessary only) orv1,analytics(necessary + analytics). Expires after one year. Strictly necessary because clearing it would re-prompt the banner on every visit.
Optional: Analytics
_ga,_ga_PD7Y7FVSXJ: set by Google Analytics 4 only if you grant analytics consent. Used to measure visits and basic engagement (page views, scroll depth, sign-up button clicks). Cleared by Google 13 months after your last visit.
No advertising cookies are set on this site.
You can change your mind at any time by clicking Cookie preferences in the footer of any page; the banner will reappear and you can grant or revoke individual categories. Revoking analytics will stop future GA pings, and the _ga cookies set during your prior consent can be cleared from your browser settings.
Consent log
Each time you save a consent decision via the banner, we record an audit row in our consent_log table containing the categories you granted, your IP address, browser user-agent, and a timestamp. This is required by GDPR Article 7(1): controllers must be able to demonstrate that consent was freely given. Audit rows are retained for two years and never linked back to email addresses or other personal identifiers.
Where your data lives
Form submissions and consent log rows are stored in our own MySQL database, hosted in the EU. Confirmation and contact emails are dispatched via Mailgun, our transactional email provider. When you opt in to SMS, your phone number, message content, and delivery receipts are processed by Twilio (our primary SMS provider) and, in regions where Twilio coverage is limited, by Telnyx. Both act as data processors, are bound by Data Processing Addenda, and are SOC 2 audited. Fonts are self-hosted on rubyy.com.
All traffic to rubyy.com flows through Cloudflare, our CDN and edge security provider. Cloudflare sees request metadata (IP address, browser user-agent, page URL) for routing, caching, and DDoS protection. That processing is necessary for the site to function and falls under Cloudflare's privacy policy. We also have Cloudflare Web Analytics enabled, which produces aggregate visitor counts using a hashed IP-and-user-agent fingerprint. It sets no cookies, does not track you across other sites, and runs whether or not you accept the cookie banner because it is not a cookie-based feature. If you would rather not be measured by it, the only way to opt out today is at the network level (a content blocker that filters Cloudflare Insights, or a VPN that bypasses our CDN).
If you grant analytics consent in the banner, additional events (page views, scroll depth, sign-up button clicks) are sent to Google Analytics 4 using measurement ID G-PD7Y7FVSXJ. We do not share or sell this data; it is used in aggregate to understand which features attract event organisers. If you reject the banner (or click "Cookie preferences" later and turn analytics off), no Google Analytics requests are made.
SMS messaging program
If you opt in to the Rubyy SMS messaging program (by verifying a mobile number or by checking the SMS opt-in box at checkout), we collect and process your phone number for the sole purpose of delivering the transactional SMS categories described in our Terms of Service § 4: account security codes, order confirmations, event reminders, order pickup notifications, and cashless wristband balance alerts. We do not send marketing SMS, and we do not sell, rent, lease, or share your phone number with any third party for their own marketing. Our SMS providers (Twilio, and in some regions Telnyx) process phone numbers solely as data processors on our behalf; they do not repurpose the data for other customers or advertisers.
Mobile opt-in and SMS consent data will not be shared with third parties or affiliates for marketing or promotional purposes.
You can opt out at any time by replying STOP (also recognised: STOPALL, UNSUBSCRIBE, CANCEL) to any Rubyy SMS, or by disabling SMS in your Rubyy notification preferences. We honour opt-out requests immediately and retain the opt-out preference indefinitely so the number is never re-enrolled accidentally. Reply HELP to any message for support contact details.
For full SMS program terms — supported carriers, message frequency, "msg & data rates may apply" disclosure, and opt-in/opt-out keywords — see Terms § 4.
Phone calls
Rubyy operates a customer service phone line. If you call our support and leave a callback number, open a phone-support request tied to your account or order, or ask us to call you, we use your phone number only to return and follow up on that request. These calls are customer care only — we do not make marketing or sales calls, and we do not sell, rent, or share your number for third-party marketing.
Outbound calls are placed through Twilio, which acts as a data processor and may present "Rubyy" as a verified caller name (branded calling). We log the fact, time, and outcome of support calls for quality and audit, and honour do-not-call requests immediately. See Terms § 14 for the full voice-communications terms.
How long we keep it
Email addresses on the launch list are retained until you ask us to remove them, or for 24 months after launch, whichever comes first. Contact-form submissions are retained for 24 months for support continuity. Server logs (IP + user-agent) are rotated after 30 days. Phone numbers are retained for as long as your Rubyy account is active and your SMS opt-in is in effect; if you opt out via STOP or by disabling SMS in your preferences, we retain only the minimum record needed to honour the opt-out (the phone number plus an opt-out timestamp) and never re-enrol it. SMS delivery receipts and message metadata are retained for 24 months for billing reconciliation and abuse investigation.
Your rights (GDPR / CCPA)
You can ask us at any time to:
- Confirm what data we hold about you
- Export it (we'll send you a JSON file)
- Correct anything that's wrong
- Delete it entirely
- Unsubscribe from launch updates (every email also has a one-click unsubscribe link)
Email [email protected] from the address you signed up with and we will action the request within 30 days.
Changes to this policy
If we materially change how we handle your data, we will update the "last updated" date above. Once Rubyy launches as a full product, we will publish a longer policy that covers the platform itself; subscribers will be notified by email before that takes effect.
Contact
Questions about this policy? Email [email protected].